xbaiee Privacy Policy

This Privacy Policy sets out the principles and practices under which xbaiee ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Member", "user") who access or use the xbaiee platform at https://xbaiee.vip. This Policy applies to all data processing activities undertaken by xbaiee in connection with the provision of its online casino and sports betting services to players based in Bangladesh.

xbaiee is committed to handling personal data responsibly, transparently, and securely. We collect only the data that is necessary for the legitimate operation of our platform, the fulfilment of our contractual obligations to Members, compliance with applicable law, and the improvement of our services. We do not sell personal data to third parties for commercial marketing purposes.

This Policy should be read in conjunction with the xbaiee Terms & Conditions, which govern the overall legal relationship between xbaiee and its Members. Where any conflict exists between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

We encourage all Members to read this Policy in full before registering an account. If you have questions about any aspect of this document, contact us directly at [email protected] before proceeding.

xbaiee collects the following categories of personal data from Members and visitors to the platform:

We do not intentionally collect special categories of sensitive personal data (such as health data, biometric data for identification purposes beyond what is strictly required for KYC liveness checks, political opinions, religious beliefs, or sexual orientation). If such data is incidentally disclosed to us — for example, in free-text support communications — it will not be retained beyond the resolution of the specific communication.

xbaiee collects personal data through the following channels:

• Direct registration: When you create a Member account, you provide your name, date of birth, contact details, and preferred payment method information directly through the registration form.
• KYC submission: When you submit identity documents or complete a liveness verification check as part of the Know Your Customer process, we collect and process the data contained in those documents.
• Transaction records: Every deposit, withdrawal, and in-platform wagering activity generates a transaction record automatically linked to your account.
• Automated technical collection: Our servers automatically log technical data such as your IP address, device fingerprint, browser type, and session timestamps each time you access the xbaiee platform. This data is captured via standard server-side logging and, where applicable, client-side tracking technologies (see Section 7 — Cookies).
• Customer support interactions: When you contact our support team by email or live chat, the content of those communications and any data you provide within them is stored as part of our support record system.
• Third-party verification providers: Where we engage third-party identity verification or fraud-screening services to support our KYC and AML obligations, those providers may return data to us as part of the verification outcome. xbaiee only receives data from third-party verification partners to the extent necessary to confirm identity and assess risk.
• Payment processors: When you complete a transaction via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment processor confirms transaction details to us. xbaiee does not receive or store your full mobile banking PIN or passwords — only the transaction reference and account identifier associated with the payment.

xbaiee uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your Member account, verify your identity, maintain your account profile, and manage your BDT-denominated Wallet.
• Service delivery: To provide access to the xbaiee sportsbook, casino games, live dealer tables, and all other platform features, and to process bets, calculate winnings, and settle markets.
• Payment processing: To facilitate deposits and withdrawals via your selected payment method, verify payment method ownership, and maintain financial transaction records.
• KYC and AML compliance: To fulfil our obligations under applicable anti-money laundering and counter-terrorism financing frameworks by verifying Member identities, monitoring transaction patterns, and reporting suspicious activity where legally required.
• Fraud prevention and security: To detect, investigate, and prevent unauthorised account access, fraudulent transactions, bonus abuse, multi-accounting, and any other activity that threatens the security of the platform or its Members.
• Responsible gaming: To monitor gambling behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion orders placed by Members, and to fulfil our duty of care obligations to players across Bangladesh.
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, bet settlements), security alerts, and — where you have given explicit consent — promotional communications about bonuses, tournaments, and seasonal offers.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain quality records of our support interactions.
• Platform improvement: To analyse aggregated, anonymised usage data and identify opportunities to improve the xbaiee user experience, fix technical issues, and develop new features.
• Legal compliance: To comply with any legal obligation, court order, or regulatory direction applicable to xbaiee's operations, including but not limited to data retention obligations and mandatory disclosures.

xbaiee will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

xbaiee processes personal data only where a valid legal basis exists for doing so. The following legal bases apply to the processing activities described in this Policy:

• Contractual necessity: The majority of data processing carried out by xbaiee is necessary to perform the contract between xbaiee and the Member (the Terms & Conditions). This includes account management, payment processing, bet settlement, and customer support. Without this processing, xbaiee could not deliver the services you have registered to use.
• Legal obligation: Certain processing activities are required by law, including KYC identity verification, AML transaction monitoring, and the retention of financial records for a minimum statutory period. xbaiee must carry out these activities regardless of Member consent in order to comply with applicable legal requirements.
• Legitimate interests: xbaiee processes certain data — particularly technical and behavioural data — on the basis of its legitimate interests in operating a secure, fraud-resistant, and commercially sustainable platform. Such processing is subject to a balancing test ensuring that xbaiee's interests do not override the fundamental rights and freedoms of Members.
• Consent: Where xbaiee sends promotional communications or uses non-essential cookies and tracking technologies, it does so only where you have provided clear, informed, and freely given consent. You may withdraw your consent at any time by contacting [email protected], without affecting the lawfulness of any processing carried out prior to withdrawal.

xbaiee does not sell, rent, or trade your personal data to any third party for that party's own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors: We share the transaction data necessary to facilitate deposits and withdrawals with your chosen payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a banking institution). Each payment processor is bound by its own privacy policy and data protection obligations.
• Identity verification providers: Where we engage third-party KYC or age-verification services, we share the minimum identity data required to complete the verification process. These providers act as data processors under xbaiee's instruction and are contractually prohibited from using Member data for any other purpose.
• Game studio partners: When you play games provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain technical session data (e.g., game session ID, account reference) is passed to the studio's game server to facilitate gameplay. Studios do not receive your full identity or financial data.
• Fraud and risk screening services: We may share IP addresses, device fingerprints, and account behaviour signals with specialist fraud-prevention partners to protect the platform from financial crime and abuse.
• Legal and regulatory authorities: We will disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of xbaiee, its Members, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of xbaiee's business assets, personal data held by xbaiee may be transferred to the acquiring entity as part of that transaction. Affected Members will be notified in advance of any such transfer and given the opportunity to object.

All third parties with whom xbaiee shares personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose for which it was shared. xbaiee remains responsible for ensuring that third-party data processors comply with these obligations.

xbaiee uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and understand how Members interact with our services. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the xbaiee platform to function correctly. They maintain your login session, remember your language and currency preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing the basic operation of the platform.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the xbaiee platform, including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used exclusively to improve platform performance and is not linked to individual identifiable Members.
• Functionality cookies: These cookies remember your account preferences (e.g., preferred payment method, notification settings, responsible gaming limit configurations) so that you do not need to re-enter them on each visit.
• Security cookies: These cookies support our fraud detection and account security infrastructure, including device fingerprinting and multi-session monitoring. They are used solely to protect Member accounts and platform integrity.

xbaiee does not use third-party advertising cookies or behavioural retargeting technologies on its platform. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your xbaiee account. For a full list of cookies deployed by the platform, contact [email protected].

xbaiee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention schedule applies:

Following the expiry of the applicable retention period, xbaiee will securely delete or irreversibly anonymise personal data so that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical analysis. You may request early deletion of your data, subject to the limitations described in Section 10.

xbaiee takes the security of your personal data seriously and implements a multi-layered security architecture to protect it against unauthorised access, loss, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the xbaiee servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all pages of the platform, including login, registration, payment, and support pages.
• Encrypted data storage: Sensitive fields in our databases — including passwords, payment identifiers, and verification document references — are stored using strong cryptographic hashing and encryption algorithms. Plain-text passwords are never stored.
• Access controls: Access to Member personal data within xbaiee's internal systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all administrative accounts.
• Intrusion detection: xbaiee employs real-time intrusion detection systems (IDS) and automated anomaly monitoring to identify and respond to suspicious activity targeting platform infrastructure.
• Regular security audits: The xbaiee platform and its data handling practices are subject to periodic internal and third-party security reviews to identify and remediate vulnerabilities proactively.
• Data minimisation: xbaiee follows the principle of data minimisation — we collect only the data necessary for defined purposes and do not retain data beyond the periods specified in Section 8.

While xbaiee employs robust security practices, no online platform can guarantee absolute security. In the event of a data security breach that poses a risk to Members' rights and freedoms, xbaiee will notify affected Members promptly via email and take all reasonable steps to contain and remediate the breach. You are responsible for maintaining the confidentiality of your own account credentials — see the Terms & Conditions (Section 4) for your security obligations.

As a Member of xbaiee, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request" and your registered account email address. xbaiee will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data that xbaiee holds about you, together with information about how that data is being used. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity and KYC data, corrections may require re-submission of supporting documents.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other lawful basis applies), or where you object to processing on the basis of legitimate interests. Please note that this right cannot override xbaiee's legal obligations to retain data for AML, financial record-keeping, or dispute resolution purposes.
• Right to restrict processing: You may request that xbaiee restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is under consideration.
• Right to data portability: You have the right to receive a copy of the personal data you have directly provided to xbaiee in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to object: You may object to xbaiee processing your personal data on the basis of legitimate interests. xbaiee will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based on your consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of any processing already carried out.

xbaiee will not charge a fee for responding to a standard privacy rights request. However, we reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive in scope.

The xbaiee platform is strictly restricted to individuals aged 18 years and over. xbaiee does not knowingly collect, solicit, or process personal data from individuals under the age of 18. Age verification is a mandatory component of the xbaiee account registration and KYC process.

If xbaiee becomes aware that personal data has been collected from an individual who is under 18 years of age — whether through the registration process, a parental report, or any other means — the following actions will be taken immediately:

• The associated account will be suspended and access to the platform revoked.
• All personal data associated with the underage account will be securely deleted within 30 days, to the extent permitted by our legal obligations.
• Any real-money deposits associated with the account will be returned to the original payment source following verification.
• Any winnings credited to the account will be forfeited.

If you are a parent or guardian and you believe that your child has registered an account with xbaiee, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act on all such reports as a matter of highest priority.

xbaiee works with third-party age verification technology providers to minimise the risk of underage access and takes its responsibility to protect minors with the utmost seriousness. 18+ only. Gambling is for adults.

The xbaiee platform integrates a number of third-party service providers whose products and services are necessary for the delivery of our core offering. Each of these providers operates under its own privacy policy and is responsible for the data it processes independently. xbaiee selects third-party partners with care, ensuring they maintain appropriate data protection standards. The key third-party categories are:

• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply the casino games and live dealer experiences available on xbaiee. Game session data is transmitted to studio servers to facilitate gameplay. These studios' privacy practices are governed by their own policies.
• Payment gateways: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks process payment transactions on xbaiee's behalf. Transaction data is shared with these providers solely to execute the relevant financial instruction. Each provider's data handling is governed by its own terms and privacy documentation.
• Analytics infrastructure: xbaiee uses server-side analytics tools to measure platform performance and user experience. Where analytics data is processed by third parties, it is anonymised or pseudonymised prior to transmission and cannot be used to directly identify individual Members.
• Customer support tooling: Our support team uses a ticketing and live chat system to manage Member enquiries. Communications data shared through these channels is stored on the provider's infrastructure and is subject to appropriate data processing agreements with xbaiee.

xbaiee does not embed third-party social media widgets, advertising pixels, or data broker tracking scripts on its platform. The xbaiee website does not contain outbound links to external websites, and xbaiee is not responsible for the privacy practices of any website you navigate to independently of our platform.

xbaiee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the platform. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification email to all registered Members at their account email address, summarising the key changes.
• Display a prominent notice on the xbaiee platform for a minimum of 14 days prior to the updated Policy taking effect.

Your continued use of the xbaiee platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you object to any change in this Policy, you should cease using the platform and may request account closure by contacting [email protected]. The most current version of this Privacy Policy is always available at https://xbaiee.vip/privacy-policy.

For all privacy-related enquiries, Subject Access Requests, data deletion requests, consent withdrawals, or general questions about this Policy, please contact the xbaiee privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy requests: "Privacy Rights Request" or "Data Deletion Request"
• Response time: Acknowledgement within 5 business days; full response within 30 calendar days
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Coverage: Serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh

This Privacy Policy was last reviewed and updated on 1 June 2026. All previous versions of this Policy are superseded by this document.